Thint Sense Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how Thint Research Private Limited ("THINT", "we", "us", or "our") processes information on behalf of our enterprise customers ("Customer", "you", or "your") through the Thint Sense Experience Intelligence Platform (the "Platform").

Thint Sense is a B2B Software-as-a-Service (SaaS) platform. The Platform is designed to support customer compliance with applicable privacy laws including the General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act of India (DPDP Act). Under these frameworks, the Customer acts as the Data Fiduciary/Data Controller, and THINT acts as the Data Processor.

This Policy applies strictly to data processed by the Platform on behalf of the Customer. It does not apply to the Customer's own privacy practices, for which the Customer is solely responsible.

2. Information We Process

2.1 Customer Data (Data Processed on Your Behalf)

We process data that you, your employees, or your end-users submit to the Platform ("Customer Data"). This includes:

• Survey & Signal Data: Responses to surveys, feedback forms, or voice interactions collected via the Platform.
• Customer Identity Profiles: Identifiable end-user information provided by you to facilitate communications or analytics. To protect privacy, THINT automatically employs industry-standard encryption and pseudonymization techniques when storing customer identity profiles.
• Public Third-Party Data: Data fetched from third-party integrations (e.g., public social platforms, review sites) which you authorize the Platform to ingest via API.

2.2 Account and Operational Data

We collect and process data relating to your authorized users (your employees and administrators) who access the Platform:

• Identity & Access Data: Names, email addresses, roles, and branch/hierarchy access permissions.
• Usage Logs: Audit trails, system interactions, and capability checks to monitor security, performance, and SLA compliance.

3. How We Use the Information

THINT processes Customer Data strictly in accordance with the Customer's documented instructions, as defined in our Terms of Service and Data Processing Addendum, for the following purposes:

1. Service Delivery: To provide the Platform's core functionality, including signal ingestion, journey tracking, and case management workflows.
2. Platform Intelligence Generation: To generate Customer-specific intelligence, including sentiment scores, thematic tagging, and actionable recommendations.
3. Security & Compliance: To monitor platform health, detect fraud or anomalous activity, and ensure robust Role-Based and Capability-Based Access Control.

4. Anonymized and Aggregated Intelligence

To provide advanced Experience Intelligence, Benchmarking, and Predictive Analytics, THINT utilizes proprietary methodologies to aggregate and anonymize data.

Privacy-Preserving Commitment: We strictly guarantee that raw, identifiable Customer Data (including any Personally Identifiable Information) is never used to train, fine-tune, or develop any shared Large Language Models (LLMs) or foundational machine learning weights.

We process Customer Data into Irreversibly Anonymized and Aggregated Derivatives. Once data has been mathematically decoupled from any identifying markers—such that it can no longer be reverse-engineered to identify the Customer or any specific individual—THINT retains the right to use this generalized statistical metadata to improve our overarching taxonomies, semantic embeddings, industry benchmarks, and proprietary heuristics.

5. Third-Party Integrations and Subprocessors

• Third-Party Platforms: Where you authorize the Platform to connect with third-party APIs, our processing of that data is strictly governed by the applicable third-party platform terms and developer policies. This includes, where applicable, the Google Privacy Policy, Google API Services User Data Policy, Google Business Profile Additional Terms, Meta Platform Terms, and Meta Developer Data Use Policy. We will automatically execute deletion requests (e.g., via webhooks) received from these platforms to remain in strict compliance.
• Subprocessors: We engage certified third-party infrastructure providers (e.g., AWS, Supabase) and authorized AI model providers to deliver the Service. A complete list of our subprocessors is available in our Subprocessor Disclosure Schedule. We execute strict zero-data-retention agreements with AI subprocessors to ensure Customer Data is never retained for external model training.

6. Data Retention and Deletion

• Customer Control: The Customer determines the data retention periods for their end-user data via platform configuration (e.g., consent expiration settings).
• Termination: Upon termination of your subscription, or upon your written request, THINT will securely delete or return all raw Customer Data, except where legally required to retain it. We reserve the right to retain Anonymized and Aggregated Derivatives generated prior to termination.

7. Security Safeguards

We implement robust, enterprise-grade technical and organizational measures to protect your data, including application-side logical tenant isolation, in-transit and at-rest encryption, and strict Capability-Based Access Controls.

Capability Management: THINT provisions organizational hierarchies, roles, and capability assignments based on the Customer's authorized onboarding instructions. Customers remain responsible for identifying authorized users, approving requested access, and requesting subsequent capability changes. THINT preserves flexibility for future self-service administration, but bears no liability for data exposure resulting from access granted according to Customer instructions.

8. Data Subject Rights

As the Data Controller, the Customer is responsible for fulfilling data subject requests (e.g., access, rectification, erasure). THINT provides the necessary technical tools within the Platform to enable the Customer to comply with these requests efficiently. For any data-related grievances or privacy inquiries, users may also contact our Grievance Officer at connect@thint.in.

9. Contact Us

For privacy-related inquiries or to request our Data Processing Addendum, please contact our Privacy Team at connect@thint.in.